
AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

ttSTING OF CLAIMS: 

4/VPreviously Presented) A method for generating, personalizing, and certifying an 
asymmetrical cryptokey in accordance with one of an operation performed at a central, secure 
locatioti corresponding to a trust center and an operation performed at a user location in 
cooperation with the trust center using a secure transmission between a user and the trust 
center, the\nethod comprising the steps of: 

causimg the trust center to provide the user with a previously generated, personalized, 
and certified sWature key pair, and with components for producing at least one encryption 
key pair; \ 

producing\he at least one encryption key pair including a public part and a secret part; 

marking theVublic part of the at least one encryption key pair using an assigned secret 
part of the previously^enerated signature key pair; 

after marking the public part of the at least one encryption key pair, transmitting the at 
least one encryption key Wir to the trust center; 

unequivocally assigning the at least one encryption key pair to the user; 

causing the trust cenwr to check the unequivocal assignment of the at least one 
encryption key pair by using a Public part of the previously generated signature key pair; 

after the check of the unequivocal assignment is performed successfully, causing the 
trust center to produce a new certificate by using at least one of the public part of the 
previously generated signature key p^ir and the public part of the at least one encryption key 
pair; \ 

encrypting the new certificate usiW the public part of the at least one encryption key 
pair; and \ 

causing the trust center to transmit thet encrypted new certificate to the user. 

5. (Previously Presented) The method accordingSto claim 4, wherein: 

the step of causing the trust center taj^rovide the user with 
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compAnents for producing at least one encryption key pair includes the step of 
providihg the user with components for producing at least one additional signature 
key pair 

tAe step of producing the at least one encryption key pair includes the step 
of producing the at least one additional signature key pair, and 

the user marks a public part of the at least one additional signature key pair 
using the secret part of the previously generated signature key pair. 

6. (Previously Presebted) The method according to claim 5, further comprising the steps of: 

in each bilatarai communication occurring between a user desiring no communication 
with the trust center md another user, marking and making available to the other user one of 
the public part of the at least one encryption key pair and the public part of the at least one 
additional signature ke^pair by using the secret part of the previously generated signature key 
pair; and 

checking a correctness of an assignment regarding one of the public part of the at least 
one encryption key pair ano^the public part of the at least one additional signature key pair by 
performing the steps of: 

verifying a sigkature, and 

checking a genuineness and a validity of the new certificate in the trust 

center. 



Tiew) A method for generating, personalizing, and certifying an asymmetrical cryptokey in 
accordance with one of an operation performed at a central, secure location corresponding to 
a trust oenter and an operation performed at a user location in cooperation with the trust 
center usmg a secure transmission between a user and the trust center, the method comprising 
the steps ofc 

causmg the trust center to provide the user with a previously generated, personalized, 
and certified srgnature key pair, and with components for producing at least one encryption 
key pair; \ 

producing me at least one encryption key pair including a public part and a secret part; 
marking the public part of the at least one encryption key pair using an assigned secret 
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part of the pre\^ously generated signature key pair; 

after marking the pubUc part of the at least one encryption key pair, transmitting the at 
least one encryption key pair to the trust center; 

xmequivocaky assigning the at least one encryption key pair to the user; 

causing the tmst center to check the unequivocal assignment of the at least one 
encryption key pair using a public part of the previously generated signature key pair; 

after the check of the unequivocal assignment is performed successfully, causing the 
trust center to generate Anew certificate by using one of: i) the public part of the previously 
generated signature key pair and the public part of the at least one encryption key pair, and ii) 
the public part of the at least one encryption key pair; 

encrypting the new ceiftificate using the public part of the at least one encryption key 

pair; 

causing the trust center tb transmit the encrypted new certificate to the user; 

in each bilateral communication occurring between a user desiring no communication 
with the trust center and another usbr, marking and making available to the other user the 
public part of the at least one encryption key pair by using the secret part of the previously 
generated signature key pair; and \ 

checking a correctness of an assignment regarding the public part of the at least one 
encryption key pair by performing the stejgs of: 
verifying a signature, and 

checking a genuineness and ^validity of the new certificate in the trust 

center. 
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